CVE-2016-10994

The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter...

CVE-2016-10994: Improper Neutralization of Input During Web Page Generation

The Truemag theme 2016 Q2 for WordPress has XSS via the s parameter...

PT-2019-7787

Name of the Vulnerable Software and Affected Versions Truemag theme 2016 Q2 for WordPress Description The issue is related to a security problem where an attacker can execute malicious scripts on a user's browser, potentially leading to unauthorized actions. This is achieved through the s...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

CVE-2016-10993: Improper Neutralization of Input During Web Page Generation

The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter...

PT-2019-7786

Name of the Vulnerable Software and Affected Versions ScoreMe theme versions prior to 2016-04-01 Description The issue allows for XSS via the s parameter. Recommendations For ScoreMe theme versions prior to 2016-04-01, update to a version released after 2016-04-01 to resolve the issue...

CVE-2017-18599

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

Design/Logic Flaw

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

CVE-2017-18599

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

PT-2019-8530

Name of the Vulnerable Software and Affected Versions Pinfinity theme versions prior to 2.0 Description The issue concerns a cross-site scripting XSS flaw. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthoriz...

CVE-2017-18599: Improper Neutralization of Input During Web Page Generation

The Pinfinity theme before 2.0 for WordPress has XSS via the s parameter...

bluestarcooking.com XSS vulnerability

Open Bug Bounty ID: OBB-672223 Description| Value ---|--- Affected Website:| bluestarcooking.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

DamiCMS Directory Traversal Vulnerability

DamiCMS is a content management system CMS for building websites quickly. A directory traversal vulnerability exists in the admin.php file in DamiCMS version 6.0.1, which can be exploited to read the contents of the file with the help of the '|' character in the 's' parameter...

CVE-2018-16237

An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI...

CVE-2018-16237: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=Tpl/Add/id/c:|windows|win.ini URI...

PT-2018-13450

Name of the Vulnerable Software and Affected Versions damiCMS version 6.0.1 Description An issue was discovered in damiCMS, where Directory Traversal is possible via '|' characters in the s parameter to "admin.php", as demonstrated by an "admin.php?s=Tpl/Add/id/c:|windows|win.ini" URI...

PT-2018-18262

Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4 Description: The issue exists within the runscript.php applet due to a directory traversal vulnerability in the processing of the s parameter. Recommendations: For versions prior to...